Ricoh SP C250SF We recommend this type for communication between security, Only, Negotiation, 265

Models: SP C252SF SP C250SF

1 380
Download 380 pages 15.01 Kb
Page 267
Image 267

Configuring the IPsec Settings

IPsec Settings

Item

Description

 

 

Encapsulation Type

Specify the encapsulation type from the following:

 

• [Transport]: Select this mode to secure only the payload section of

 

each IP packet when communicating with IPsec compliant devices.

 

• [Tunnel]: Select this mode to secure every section of each IP packet.

 

We recommend this type for communication between security

 

gateways (such as VPN devices).

 

 

Security Protocol

Select the security protocol from the following:

 

• [AH]: Establishes secure communication that supports authentication

 

only.

 

• [ESP]: Establishes secure communication that supports both

 

authentication and data encryption.

 

• [ESP&AH]: Establishes secure communication that supports both data

 

encryption and authentication of packets, including packet headers.

 

Note that you cannot specify this protocol when [Tunnel] is selected

 

for [Encapsulation Type].

 

 

Authentication

Specify the authentication algorithm to be applied when [AH] or [ESP&AH]

Algorithm for AH

is selected for [Security Protocol] from the following:

 

[MD5], [SHA1]

 

 

Encryption Algorithm

Specify the encryption algorithm to be applied when [ESP] or [ESP&AH] is

for ESP

selected for [Security Protocol] from the following:

 

[None], [DES], [3DES], [AES-128], [AES-192], [AES-256]

 

 

Authentication

Specify the authentication algorithm to be applied when [ESP] is selected

Algorithm for ESP

for [Security Protocol] from the following:

 

[MD5], [SHA1]

 

 

Life Time

Specify the life time of the IPsec SA (Security Association) as a time period

 

or data volume. The SA will expire when the time period you specify

 

elapses or the volume of data you specify reaches the volume carried.

 

If you specify both a time period and a data volume, the SA will expire as

 

soon as either is reached, and a new SA will then be obtained by

 

negotiation.

 

To specify the life time of the SA as a time period, enter a number of

 

seconds.

 

To specify the life time of the SA as a data volume, enter a number of KBs.

 

 

265

Page 267
Image 267
Ricoh SP C250SF We recommend this type for communication between security, Gateways such as VPN devices, Only, Negotiation